mirror of
https://git.yoctoproject.org/poky
synced 2026-09-20 12:49:33 +02:00
12e69785c0
The CVE databases track xmltodict as xmltodict:xmltodict, so the default python:xmltodict vendor prefix never matches and its CVEs are not evaluated at all. Use the exact vendor:product pair. Note: Original commit was for python3-xmltodict_1.0.4.bb. This is adjusted for scarthgap where recipe version is python3-xmltodict_0.13.0.bb. (From OE-Core rev: 918d1fd448ff96431197031e5adb1be658156bc2) Signed-off-by: mark.yang <mark.yang@lge.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 2229426b729adf85780c23d38c85fc3cf090f6ba) Signed-off-by: Himanshu Jadon <hjadon@cisco.com> Signed-off-by: Fabien Thomas <fabien.thomas@smile.fr> Signed-off-by: Paul Barker <paul@pbarker.dev>
36 lines
763 B
BlitzBasic
36 lines
763 B
BlitzBasic
SUMMARY = "Makes working with XML feel like you are working with JSON"
|
|
HOMEPAGE = "https://github.com/martinblech/xmltodict"
|
|
LICENSE = "MIT"
|
|
LIC_FILES_CHKSUM = "file://LICENSE;md5=01441d50dc74476db58a41ac10cb9fa2"
|
|
|
|
SRC_URI[sha256sum] = "341595a488e3e01a85a9d8911d8912fd922ede5fecc4dce437eb4b6c8d037e56"
|
|
|
|
PYPI_PACKAGE = "xmltodict"
|
|
|
|
CVE_PRODUCT = "xmltodict:xmltodict"
|
|
|
|
BBCLASSEXTEND = "native nativesdk"
|
|
|
|
inherit pypi setuptools3 ptest
|
|
|
|
SRC_URI += " \
|
|
file://run-ptest \
|
|
file://CVE-2025-9375-1.patch \
|
|
file://CVE-2025-9375-2.patch \
|
|
"
|
|
|
|
RDEPENDS:${PN} += " \
|
|
python3-core \
|
|
python3-xml \
|
|
python3-io \
|
|
"
|
|
|
|
RDEPENDS:${PN}-ptest += " \
|
|
python3-pytest \
|
|
"
|
|
|
|
do_install_ptest() {
|
|
install -d ${D}${PTEST_PATH}/tests
|
|
cp -rf ${S}/tests/* ${D}${PTEST_PATH}/tests/
|
|
}
|